Practice Test 2 | Google Cloud Certified Professional Cloud Security Engineer | Dumps | Mock Test
A customer wants multiple teams to share a single GKE cluster. Each team has its own project and will deploy its application to a namespace within the central GKE cluster. You have the responsibility to ensure that the logs of each application are routed to the log bucket of the respective team.
Which of the following will NOT help achieve the objective?
A. Create a log sink for each application.
B. Create a log bucket for each application.
C. The inclusion filter of the sink should filter using the namespace.
D. Create Inclusion rules to prevent the duplication of logs in the main GKE project.
Correct Answer: D
- Option A is incorrect. A log sink is needed to route logs.
- Option B is incorrect. A log bucket is one of the destinations for routing logs.
- Option C is incorrect. The inclusion filter will ensure that only logs of a particular namespace go to the selected log bucket.
- Option D is CORRECT. Exclusion rules are used to prevent certain logs from going into Cloud Logging.
Reference:
Comments are closed, but trackbacks and pingbacks are open.